$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json) Hash identifier: gqUSvZSZ1rcX85UZ+hp4aU9neXePYwPJyrbwadLCor0= Subject key identifier: 29:54:D6:BF:06:99:96:2F:4C:4D:29:94:18:08:78:45:86:96:A7:1E Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft Manifest number: 017A Signing time: Tue 01 Jul 2025 04:08:00 +0000 Manifest this update: Tue 01 Jul 2025 04:08:00 +0000 Manifest next update: Tue 08 Jul 2025 04:08:00 +0000 Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: frVWlTr384iQuemFCvfh9H/fhs0geomKmfIJQC1AR5I=) 2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: kKqvj0xomNS0RBNYUt8mH1385WpqQD6GeAsQ4vaFhLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Validity Not Before: Jul 1 04:08:00 2025 GMT Not After : Jul 8 04:08:00 2025 GMT Subject: CN=68635f20-dfee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:95:39:51:29:62:5c:c2:74:a8:86:a3:91: 6f:22:d7:f2:25:23:c2:86:e7:3d:66:ee:8a:37:7d: 88:ac:e7:15:93:59:72:97:a2:a6:7c:d5:d7:be:98: dc:1e:5a:84:37:66:28:93:70:28:7e:88:53:78:0c: 52:99:7b:17:8c:23:01:9e:ab:89:54:71:46:2d:22: 7c:ef:56:6e:f8:00:7c:26:7b:de:f8:ed:1c:ec:a0: 3e:67:e6:be:d4:0f:13:64:98:d0:76:fd:c9:d9:77: 1f:bf:88:f4:18:b4:1f:f7:a2:35:49:b4:d7:7a:ac: e1:33:f1:09:5e:a1:1b:8d:52:43:7b:e4:94:9c:d0: c8:21:be:af:c0:cb:3a:3d:a7:99:69:ae:06:39:0c: 33:8f:07:b4:4d:8c:d3:c8:d1:69:2e:04:7b:15:87: 9e:18:db:b4:de:3d:d8:79:95:a4:e0:eb:07:a4:f5: 1f:d9:84:9b:c3:e1:f6:07:13:b6:2f:ec:06:fd:dc: b9:73:e5:05:ee:8f:08:e4:b1:7c:e3:8a:7d:e0:9e: f8:fd:4b:88:00:2a:6a:26:8a:dc:01:23:6f:f7:6e: f2:df:bc:df:c2:c2:39:47:f9:ae:ab:4a:5a:91:ff: 8d:6b:38:0a:3c:0d:3a:1f:90:06:d0:db:e8:f8:7f: d7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:54:D6:BF:06:99:96:2F:4C:4D:29:94:18:08:78:45:86:96:A7:1E X509v3 Authority Key Identifier: keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:61:34:8f:ed:35:98:b0:5b:92:a1:dd:b0:e4:ed:80:58:9f: 82:5e:6a:be:0b:87:bb:aa:9b:05:57:71:68:f0:fc:91:92:30: 9b:06:db:17:be:66:56:58:25:35:62:53:22:80:73:4d:10:1b: 2e:f8:65:a7:f4:5f:67:9d:6f:e1:4a:4a:97:30:70:fb:fb:cd: 74:c9:3d:62:49:6a:90:ea:63:ed:1d:89:88:3e:74:ce:7c:07: 10:75:db:66:65:dc:07:d6:9f:68:72:a3:48:e8:52:ab:46:16: 39:76:d9:9d:76:ee:6c:20:98:b2:b6:5b:79:1d:4a:f6:d7:fa: ad:69:af:de:59:ac:d7:bb:a9:6e:68:c0:d0:16:c0:af:cd:29: 36:2e:72:73:60:05:c8:ec:86:0a:f2:64:a6:e5:c0:d5:8b:22: 91:d0:e9:fb:47:03:bb:7e:b2:70:5d:40:33:02:9f:da:54:bf: b3:a1:dc:3c:41:3c:ad:94:7d:f1:5e:fa:03:66:82:c6:32:84: 66:3d:07:ff:1e:26:85:91:41:c2:b3:03:9e:a1:1c:b3:48:b7: 8b:29:d1:ce:6f:55:c4:ab:fd:4c:45:a7:99:03:67:d9:a4:bf: c0:ce:a1:1a:db:14:d7:83:19:26:e5:94:5d:08:db:c7:22:2a: 6f:3e:68:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw NzcwQjkzM0IwHhcNMjUwNzAxMDQwODAwWhcNMjUwNzA4MDQwODAwWjAYMRYwFAYD VQQDEw02ODYzNWYyMC1kZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWCVOVEpYlzCdKiGo5FvItfyJSPChuc9Zu6KN32IrOcVk1lyl6KmfNXXvpjc HlqEN2Yok3AofohTeAxSmXsXjCMBnquJVHFGLSJ871Zu+AB8Jnve+O0c7KA+Z+a+ 1A8TZJjQdv3J2Xcfv4j0GLQf96I1SbTXeqzhM/EJXqEbjVJDe+SUnNDIIb6vwMs6 PaeZaa4GOQwzjwe0TYzTyNFpLgR7FYeeGNu03j3YeZWk4OsHpPUf2YSbw+H2BxO2 L+wG/dy5c+UF7o8I5LF844p94J74/UuIACpqJorcASNv927y37zfwsI5R/muq0pa kf+NazgKPA06H5AG0Nvo+H/XhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClU1r8G mZYvTE0plBgIeEWGlqceMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNYTSP7TWYsFuSod2w5O2AWJ+CXmq+C4e7qpsFV3Fo8PyRkjCbBtsX vmZWWCU1YlMigHNNEBsu+GWn9F9nnW/hSkqXMHD7+810yT1iSWqQ6mPtHYmIPnTO fAcQddtmZdwH1p9ocqNI6FKrRhY5dtmddu5sIJiytlt5HUr21/qtaa/eWazXu6lu aMDQFsCvzSk2LnJzYAXI7IYK8mSm5cDViyKR0On7RwO7frJwXUAzAp/aVL+zodw8 QTytlH3xXvoDZoLGMoRmPQf/HiaFkUHCswOeoRyzSLeLKdHOb1XEq/1MRaeZA2fZ pL/AzqEa2xTXgxkm5ZRdCNvHIipvPmhg -----END CERTIFICATE-----Generated at Tue Jul 1 14:48:48 2025 by rpki-client